Guided Web Browsing
Allowlist-only mode for complete control over internet access – perfect for kiosks, healthcare, schools, and specialized environments.
What is Guided Web Browsing?
Guided Web Browsing is GuardRail’s allowlist-only mode – a security feature that restricts internet access to ONLY approved websites. Unlike traditional threat detection that blocks bad sites, Guided Web Browsing only allows access to sites you explicitly approve.
How It Works
- You Control Every Site: Create lists of approved websites that users can access
- Everything Else Blocked: Any site not on your allowlist is automatically blocked
- Layered Restrictions: Apply multiple allowlists for maximum control
- Still Protected: Even allowlisted sites are checked for threats
Perfect For These Scenarios
Retail & Banking Kiosks
Public terminals that only access your business applications – no personal use, no security risks.
- Banking sites only for financial kiosks
- Corporate applications for employee kiosks
- Product catalogs for retail displays
- Zero personal browsing or security risks
chase.com, bankofamerica.com, wellsfargo.com, weather.com (for ambiance)
Schools & Computer Labs
Educational sites only – prevent access to social media, games, and inappropriate content during class.
- Educational websites approved by teachers
- Research sites for homework
- Block games, social media, entertainment
- Different lists for different grade levels
khanacademy.org, wikipedia.org, *.edu sites, approved research databases
Hotels & Guest Computers
Business center computers with controlled access – prevent guests from accessing inappropriate sites or installing malware.
- Business travel sites (airlines, booking)
- Email and productivity tools
- Local information and maps
- Protection from malware and abuse
outlook.com, gmail.com, google.com/maps, airline sites, local tourism
Public Libraries
Controlled access for library patrons – research and reading only, no inappropriate content.
- Research databases and educational sites
- Library catalog and services
- Government and public service sites
- Block entertainment and social media
library catalog, *.gov, research databases, job search sites
Government & Secure Facilities
Maximum security for classified or sensitive environments – only approved business sites accessible.
- Government portals and internal systems
- Approved inter-agency sites
- Zero personal browsing
- Compliance with security policies
*.gov, *.mil, approved contractor sites, internal portals
Healthcare & Memory Care
Specialized care environments where controlled access protects vulnerable populations.
- Safe, familiar websites for patients
- Prevent confusion or distress from unexpected content
- Family-approved sites for personalized care
- Protection from scams targeting elderly or vulnerable
weather.com, ground.news, youtube.com, family photo sites
Powerful Features
🎯 Allowlist Profiles
Create reusable lists of approved sites for different use cases. Apply the same profile to multiple devices instantly.
🏷️ Layered Restrictions
Apply multiple allowlists to one device for maximum control. Only sites approved in ALL lists are accessible.
🌐 Subdomain Support
Allow entire domains including all subdomains, or restrict to specific subdomains only.
🔒 Still Protected
Even allowlisted sites are checked for malware and phishing. If a trusted site gets compromised, we still block the threat.
📋 Bulk Import
Paste a list of domains and import hundreds of sites at once. No need to add them one by one.
👥 Hierarchical Management
MSPs can create company-wide allowlists. Clients can add their own sites. Families can customize for individual residents.
How Guided Web Browsing Works
Create Allowlist
Login to the GuardRail portal and create an allowlist profile. Add approved domains like chase.com, weather.com, etc.
Create Tag
Create a tag (like “banking-kiosk”) and link it to your allowlist profile. Tags make it easy to apply the same list to multiple devices.
Assign to Devices
Go to your Endpoints page and assign the tag to the devices that should use this allowlist.
Instant Protection
Immediately, those devices can ONLY access sites on your allowlist. Everything else is blocked.
Guided Web Browsing vs. Standard Protection
| Feature | Standard Protection | Guided Web Browsing |
|---|---|---|
| How It Works | Blocks known threats, allows everything else | Allows only approved sites, blocks everything else |
| Best For | General business use, employee computers | Kiosks, healthcare, schools, public terminals |
| Control Level | Moderate – blocks bad, allows good | Maximum – you control every site |
| User Freedom | High – browse any safe site | Low – only approved sites |
| Setup Required | Minimal – works out of box | Initial setup to define allowlists |
| False Positives | Occasional – may block safe sites | Zero – you define what’s allowed |
Example Deployment Scenarios
The following are hypothetical examples illustrating how organizations might use Guided Web Browsing.
Scenario 1: Memory Care Facility
The Challenge
A memory care facility wants to provide internet access to residents, but faced several concerns:
- Residents with dementia could become confused or distressed by unexpected content
- Privacy concerns about residents accessing financial or personal accounts
- Need to allow safe, familiar content like weather, news, and family photos
- Each resident’s family wanted to approve specific sites
Possible Solution
The facility could deploy GuardRail with Guided Web Browsing:
Step 1: Facility-Wide Allowlist
Created “Brookside-Safe-Sites” with: weather.com, ground.news, youtube.com
Step 2: Family-Specific Allowlists
Each resident’s family created their own allowlist: “Smith-Family” (grandkids’ school site, family photos), “Jones-Family” (church website, recipe sites)
Step 3: Layered Approach
Each resident computer has TWO tags applied:
1. “brookside-safe” (facility allowlist)
2. “smith-family” (family allowlist)
Result: Only sites approved by BOTH facility AND family are accessible
Expected Benefits
- ✅ Prevents incidents of distressing content
- ✅ Families feel in control of loved ones’ internet access
- ✅ Residents access only safe, familiar websites
- ✅ Staff could easily add/remove sites as needed
- ✅ Complete protection from scams targeting elderly
Frequently Asked Questions
What happens if a user tries to visit a non-allowed site?
They see a block page explaining that the site is not on the approved list. The block is logged for administrators to review. If needed, admins can quickly add the site to the allowlist.
Can users request access to new sites?
Yes! The block page includes a “Request Access” option. Administrators can review requests and approve/deny them from the portal.
How many sites can be on an allowlist?
Unlimited! Add as many or as few as needed. We’ve seen allowlists with 5 sites (kiosks) and lists with 500+ sites (large organizations).
Can I use both Guided Web Browsing and threat detection?
Yes! Even sites on your allowlist are still checked for malware and phishing. If chase.com gets hacked and serves malicious content, GuardRail still blocks it.
What about search engines?
You can allowlist search engines like google.com. However, clicking search results to non-allowed sites will be blocked. This is perfect for research environments where you want search but controlled access.
How do I handle subdomains?
When adding a domain, toggle “Include Subdomains” to allow all subdomains (*.example.com). Or add specific subdomains only (mail.google.com but not youtube.google.com).
Can different devices have different allowlists?
Absolutely! Create multiple profiles (“Banking-Kiosk”, “School-Lab”, “Memory-Care”) and assign different tags to different devices. Each device can have its own unique allowlist.
What happens if I apply multiple tags to one device?
The device gets the INTERSECTION of all tagged allowlists. For example:
• Tag 1: sites A, B, C
• Tag 2: sites B, C, D
• Result: Only B and C allowed (most restrictive)
Is Guided Web Browsing included in all plans?
Yes! Guided Web Browsing is included with all GuardRail plans at no additional cost. View pricing details.
Ready to Get Started?
Try Guided Web Browsing risk-free for 30 days. Perfect for kiosks, healthcare, schools, and specialized environments.
✓ 30-day free trial • ✓ Up to 25 endpoints • ✓ No credit card required • ✓ Full support included